Question No 1

A company plans to deploy identity for improved visibility and identity - based controls for least privilege access to applications and dat a. The company does not have an on - premises Active Directory (AD) deployment, and devices are connected and managed by using a combination of Entra ID and Jamf. Which two supported sources for identity are appropriate for this environment? (Choose two.)

Choose the Choices:

Question No 2

A systems engineer (SE) is working with a customer that is fully cloud - deployed for all applications. The customer is interested in Palo Alto Networks NGFWs but describes the following challenges "Our apps are in AWS and Azure, with whom we have contracts and minimum - revenue guarantees. We would use the built - in firewall on the cloud service providers (CSPs), but the need for centralized policy management to reduce human error is more important." Which recommendations should the SE make?

Choose the Choices:

Cloud NGFWs at both CSPs; provide the customer a license for a Panorama virtual appliance from their CSP's marketplace of choice to centrally manage the systems.

Cloud NGFWs in AWS and VM - Series firewall in Azure; the customer selects a PAYG licensing Panorama deployment in their CSP of choice.

VM - Series firewalls in both CSPs; manually built Panorama in the CSP of choice on a host of either type Palo Alto Networks provides a license.

VM - Series firewall and CN - Series firewall in both CSPs; provide the customer a private - offer Panorama virtual appliance from their CSP’s marketplace of choice to centrally manage the systems.

Question No 3

A customer claims that Advanced WildFire miscategorized a file as malicious and wants proof, because another vendor has said that the file is benign. How could the systems engineer assure the customer that Advanced WildFire was accurate?

Choose the Choices:

Review the threat logs for information to provide to the customer.

Use the WildFire Analysis Report in the log to show the customer the malicious actions the file took when it was detonated.

Open a TAG ticket for the customer and allow support engineers to determine the appropriate action.

Do nothing because the customer will realize Advanced WildFire is right.

Question No 4

Which three known variables can assist with sizing an NGFW appliance? (Choose three.)

Choose the Choices:

Connections per second

Max sessions

Packet replication

App - ID firewall throughput

Telemetry enabled

Question No 5

Which statement applies to the default configuration of a Palo Alto Networks NGFW?

Choose the Choices:

Security profiles are applied to all policies by default, eliminating implicit trust of any data traversing the firewall.

The default policy action for intrazone traffic is deny, eliminating implicit trust within a security zone.

The default policy action allows all traffic unless explicitly denied.

The default policy action for interzone traffic is deny, eliminating implicit trust between security zones.

Practice Palo Alto Networks PSE-Strata-Pro-24 Exam Questions

Question No 1

Question No 2

Question No 3

Question No 4

Question No 5

PSE-Strata-Pro-24 Exam Features

PSE-Strata-Pro-24 PDF Dumps